CVE-2026-109414

The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection in all versions up to and including 3.6.1 . The root cause is insufficient escaping of user-supplied parameters and a lack of sufficient preparation on existing SQL queries, specifically re...

WordPress Vitepos – Point of Sale (POS) for WooCommerce plugin <= 3.6.1 - Authenticated (Vendor+) SQL Injection vulnerability

Authenticated Vendor+ SQL Injection vulnerability discovered by John Ryan Albon in WordPress Plugin Vitepos versions = 3.6.1...